
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
File: oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft (raw, json)
Hash identifier: Kq/5fM26L8/+x7lO1eVJXxOnFxa5o1gLKzqEXS0q0Kk=
Subject key identifier: 6F:09:D5:34:8F:F9:8A:1A:7D:27:52:5F:E5:47:63:0F:CF:02:9D:E0
Authority key identifier: A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48
Certificate issuer: /CN=A91D5F2D/serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748
Certificate serial: 0495
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
Manifest number: 0476
Signing time: Sat 13 Jun 2026 00:09:39 +0000
Manifest this update: Sat 13 Jun 2026 00:09:39 +0000
Manifest next update: Sat 20 Jun 2026 00:09:39 +0000
Files and hashes: 1: oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl (hash: TU9OncTBW7s9LrJBo4PlyM0sfcrWq7CQvjeuS/ygdPI=)
2: 17D3C6A89B2611EC8880303EC4F9AE02.roa (hash: FT+yGA0UMj3t+pSIyryVQQ/sEofGBhdL514V1fKn2KU=)
3: 5A76CDC2989511EC821F343DC4F9AE02.roa (hash: /ti17IFC7q1Ah/qPnVmsDmKH5schjMG9yp+KWaohlII=)
4: 8F5EABBE919F11EDA7387A37C4F9AE02.roa (hash: mD2HqpNx7VAE/fzRvuWKCUkO1WROa4R3hNCfEouu84g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl
rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:09:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1173 (0x495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5F2D, serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748
Validity
Not Before: Jun 13 00:09:39 2026 GMT
Not After : Jun 20 00:09:39 2026 GMT
Subject: CN=6a2c9fc3-1b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e5:e7:5e:3b:88:68:c3:11:36:a7:7a:d6:74:
e4:a3:b3:10:33:ae:bc:b6:41:f4:98:b8:d7:7e:3e:
45:0c:58:f1:e4:a6:50:f7:6b:0e:49:d9:41:00:0f:
5d:e4:de:42:da:40:e2:67:93:43:85:b7:40:41:fc:
ac:d2:34:02:d2:20:92:64:61:3a:ba:20:fb:70:14:
41:c3:7b:99:b1:64:fa:72:88:4a:88:ea:0a:db:f6:
e2:77:d6:6c:73:10:9d:48:a0:83:f5:e3:e9:43:b6:
bf:98:0f:b9:be:0b:3c:be:eb:e5:ac:94:ac:7f:2f:
fe:65:c8:33:85:85:be:56:8a:49:c3:08:fc:53:7d:
09:c9:91:54:51:db:95:7f:c2:47:3a:1b:70:bb:fc:
8b:11:29:ef:a9:5c:9b:35:ad:7e:63:58:f5:4b:5e:
61:9b:67:c5:27:1c:78:51:97:95:72:2a:7c:d2:2d:
10:3c:17:78:0d:2c:a9:bd:51:54:74:b2:30:84:90:
54:e7:70:ce:3c:f3:03:26:55:d1:0f:1e:79:8d:bb:
6a:e9:22:c6:14:99:7e:d8:54:f8:32:db:84:af:68:
94:ca:da:22:bd:f2:2f:26:3f:76:b2:2b:0a:d8:09:
69:e4:4b:c2:c8:0d:52:44:1f:1e:fb:e3:8d:5d:7d:
fa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:09:D5:34:8F:F9:8A:1A:7D:27:52:5F:E5:47:63:0F:CF:02:9D:E0
X509v3 Authority Key Identifier:
keyid:A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e4:f8:73:b4:61:51:c9:7b:ce:8c:d2:ca:df:a2:e5:ba:3d:
d2:54:f4:8c:0a:a9:60:ad:8f:8c:e5:23:b0:1a:26:4f:6a:96:
92:3e:96:2c:40:c0:d9:6d:16:9e:09:90:ea:aa:a7:28:c4:26:
cd:e0:68:03:61:8c:34:7a:c7:e7:57:16:8a:8a:d3:3d:39:b0:
22:86:3b:0b:a1:5d:d8:b9:f9:8f:f9:91:eb:c7:76:b8:bc:cf:
08:35:c4:03:09:9e:5e:cd:d2:e5:40:fe:ae:2b:e6:0b:cd:03:
4c:0a:20:2b:f3:d7:1f:66:89:a6:20:5f:49:a3:8b:fc:e6:bb:
3a:22:e4:91:e5:76:c0:5d:1b:93:d0:8b:a0:dc:54:62:0f:00:
dc:d2:64:13:7e:9c:2f:a2:06:51:e0:3b:31:4f:91:04:8f:0d:
6b:ce:f5:ae:e3:69:4d:c3:4d:55:43:a6:f0:bf:0e:7a:d9:bf:
4b:02:fb:07:9b:c0:ea:02:00:30:af:13:c9:c2:8a:4d:a9:bc:
c8:a9:c7:c8:4a:29:15:33:d1:37:58:0b:e0:cb:81:75:b2:fa:
c0:84:6a:91:58:6a:b5:f7:6a:18:c3:ad:c0:4d:99:15:f1:af:
1b:e6:3d:a0:28:5b:ee:63:3e:89:f2:be:29:d5:a1:7b:2b:44:
cb:69:dd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:24:56 2026 by rpki-client